From 4ef77b6d1b52e1fe52a7fd48d38d9233f0961640 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Sun, 24 Mar 2013 13:15:23 +0100 Subject: xtables: fix missing protocol and invflags xtables -I INPUT -p tcp --dport 22 -j ACCEPT iptables: Target problem. Run `dmesg' for more information x_tables: ip_tables: tcp match: only valid for protocol Signed-off-by: Pablo Neira Ayuso --- iptables/nft-ipv6.c | 2 ++ 1 file changed, 2 insertions(+) (limited to 'iptables/nft-ipv6.c') diff --git a/iptables/nft-ipv6.c b/iptables/nft-ipv6.c index a2e80306..65a89490 100644 --- a/iptables/nft-ipv6.c +++ b/iptables/nft-ipv6.c @@ -42,6 +42,8 @@ static int nft_ipv6_add(struct nft_rule *r, struct iptables_command_state *cs) add_proto(r, offsetof(struct ip6_hdr, ip6_nxt), 1, cs->fw6.ipv6.proto, cs->fw6.ipv6.invflags); + add_compat(r, cs->fw6.ipv6.proto, cs->fw6.ipv6.invflags); + return cs->fw6.ipv6.flags; } -- cgit v1.2.3